GHSA-9v8h-qqgm-4m35Critical▾ MidnightBrotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 52.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via GHSA
Last analysed / modified upstream
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
brotli >= 1.0.3, < 1.2.1brotlicffi >= 1.0.3, < 1.2.1.0Upgrade to a patched release:
brotli 1.2.1brotlicffi 1.2.1.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder
CVE-2025-66565Critical· 9.8Fiber Utils is a collection of common functions created for Fiber
CVE-2026-110353High· 7.5HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame
CVE-2026-56388NoneApache bRPC: Out-of-Bounds Write in Redis Command Parser
CVE-2026-98783Medium· 4.1kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (CVE-2026-98783)
CVE-2026-48503High· 7.5libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead